sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers

• CVE-2026-104730 Critical 9.8 Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter 0.5%
• CVE-2025-5482 High 8.8 Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation 0.6%
• CVE-2024-1294 Medium 5.3 Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice 0.7%
• CVE-2021-4415 Medium 4.3 Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass 0.4%